Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D04F30B05726FA543C147DA94BFBD44C1D936300.cer
File:                     D04F30B05726FA543C147DA94BFBD44C1D936300.cer (raw, json)
Hash identifier:          BQFoblFvtkKhwEZcYSA6dycFD8sQyfVty+Anrb/UNGI=
Subject key identifier:   D0:4F:30:B0:57:26:FA:54:3C:14:7D:A9:4B:FB:D4:4C:1D:93:63:00
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2CDFB6A81CB171FE31AEAB5C9B0143AA6D68E791
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/D04F30B05726FA543C147DA94BFBD44C1D936300.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Feb 2024 17:11:59 +0000
Certificate not after:    Tue 11 Feb 2025 17:16:59 +0000
Subordinate resources:    AS: 267668
                          IP: 45.224.72.0/22
                          IP: 2804:4508::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:df:b6:a8:1c:b1:71:fe:31:ae:ab:5c:9b:01:43:aa:6d:68:e7:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 13 17:11:59 2024 GMT
            Not After : Feb 11 17:16:59 2025 GMT
        Subject: CN=D04F30B05726FA543C147DA94BFBD44C1D936300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0d:be:16:29:cc:1b:8f:6e:c0:a7:56:17:ad:
                    a6:b0:fd:49:65:09:89:e8:4c:aa:9f:de:b7:f5:7a:
                    73:17:57:c7:56:33:26:2c:27:83:52:6f:28:e3:9d:
                    d4:35:e5:03:19:7d:2f:02:04:76:97:96:76:4d:e8:
                    ff:3a:05:15:60:95:b5:b3:90:9a:92:70:96:e8:9c:
                    f8:ca:22:49:1b:ea:48:66:10:86:9a:55:2f:92:1f:
                    0e:12:e8:ab:90:33:55:70:3e:32:5b:63:e4:7a:8d:
                    29:c4:f9:04:c8:bf:93:dd:7f:b3:48:66:8f:d8:a4:
                    b0:1d:80:bb:9b:62:ea:0a:07:f7:4b:fd:c1:5b:d5:
                    3a:0d:09:cc:91:52:01:8b:58:ee:3d:87:bd:a0:3a:
                    15:e0:95:d3:a8:5e:08:ba:88:ab:b5:60:b0:ee:ea:
                    d5:64:d7:0c:43:a3:b5:b0:bd:1a:14:38:86:6c:ef:
                    60:94:07:7c:d1:68:fe:35:1a:06:6c:35:cb:7b:4a:
                    18:43:84:21:3a:3e:d7:ac:34:a5:3d:fc:5b:6d:55:
                    32:76:d2:1c:6e:99:f3:d2:4f:5c:cf:05:b6:5b:1a:
                    be:33:a3:bd:2d:b1:ba:3c:58:b0:0b:45:e5:9a:a7:
                    20:32:fa:45:59:b4:9d:f5:62:d1:61:e2:85:e0:56:
                    94:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:4F:30:B0:57:26:FA:54:3C:14:7D:A9:4B:FB:D4:4C:1D:93:63:00
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/D04F30B05726FA543C147DA94BFBD44C1D936300.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.72.0/22
                IPv6:
                  2804:4508::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267668

    Signature Algorithm: sha256WithRSAEncryption
         9f:d3:94:6f:5d:b2:65:23:33:2e:62:f6:4f:8f:82:59:8b:40:
         ad:89:6d:a5:04:c7:10:02:a2:7a:43:65:f0:bb:c4:c2:79:f3:
         96:46:19:44:7e:cd:da:0f:1d:17:9f:cd:e5:d6:51:e9:06:89:
         5c:e3:5d:34:64:d8:67:16:9b:36:7a:8e:b0:93:35:ad:3c:8e:
         6f:24:5f:0d:20:f1:ef:94:ec:84:4e:3b:b5:bc:06:d0:98:dd:
         89:75:f4:51:68:5e:c0:a4:0c:57:d4:94:6a:98:30:43:f8:f6:
         5d:04:18:c1:86:49:b9:b4:9d:48:19:70:45:06:86:9e:63:8a:
         89:8a:79:5e:e8:5f:f0:22:55:8d:e0:94:0e:ca:53:d1:33:7b:
         6d:2a:1a:b5:52:ff:ea:62:d9:17:e6:82:30:5b:68:8c:b7:ac:
         15:7f:47:db:62:8f:b7:3d:51:15:e3:d9:0d:49:42:2a:08:74:
         9b:2e:17:2b:ec:10:69:02:ec:38:88:be:d9:81:3c:f9:9f:27:
         a6:3a:ec:32:3b:96:a5:b6:e1:f5:15:22:fa:c0:3f:f1:a6:95:
         0c:fd:b7:5c:ab:c4:a9:7c:f2:ee:e8:f1:09:b4:35:e5:72:a3:
         bf:40:8f:e6:dc:25:61:26:40:3c:c2:50:b1:a6:9d:da:23:82:
         f9:77:68:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org